Page MenuHomeFreeBSD

Fix broken STARTTLS when SharedMemoryKey is enabled
ClosedPublic

Authored by hrs on Feb 17 2020, 7:33 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Nov 14, 5:59 PM
Unknown Object (File)
Mon, Nov 3, 10:52 PM
Unknown Object (File)
Thu, Oct 30, 3:35 AM
Unknown Object (File)
Oct 17 2025, 7:57 AM
Unknown Object (File)
Oct 15 2025, 4:43 AM
Unknown Object (File)
Oct 14 2025, 7:12 PM
Unknown Object (File)
Oct 14 2025, 7:12 PM
Unknown Object (File)
Oct 14 2025, 8:09 AM
Subscribers

Details

Summary

OpenSSL 1.1 API patch for sendmail has a bug which
prevents sm_RSA_generate_key() function from working.
This function is used to generate a temporary RSA key
for a shared memory region used for TLS processing.
Note that 12.0 and 12.1-RELEASE include this bug.

To trigger this bug, SM_CONF_SHM compile-time
option (enabled by default) and SharedMemoryKey
run-time option (not enabled by default) in a .cf file
are required. The latter corresponds to
confSHARED_MEMORY_KEY in a .mc file. See also Bug 242861.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable